Tag: SeServiceLogonRight

Assume the following scenario:

• A Network Device Enrollment Service (NDES) is implemented in the network.
• The NDES server uses a domain account or a Group Managed Service Account (gMSA) for the identity of the SCEP IIS application pool.
• Requesting certificates via NDES fails with HTTP error code 503 (Server Unavailable).
• Calling the mscep and mscep_admin pages also fails with HTTP error code 500.
• Even after an iisreset or restart of the NDES server, no event appears after calling the mscep or mscep_admin page that the NDES service has started or that there were errors.

Continue reading "Requesting certificates through the Network Device Enrollment Service (NDES) fails with HTTP error code 503 and there are no entries in the Event Viewer"

Assuming one implements Microsoft's Active Directory Administrative Tiering Model, or applies similar hardening measures to one's servers, this will have an impact on the CEP components.

Continue reading "Required Windows security permissions for the Certificate Enrollment Policy Web Service (CEP)"

Assuming one implements Microsoft's Active Directory Administrative Tiering Model, or applies similar hardening measures to one's servers, this will impact the CES components.

Continue reading "Required Windows security permissions for the Certificate Enrollment Web Service (CES)"

Assuming one implements Microsoft's Active Directory Administrative Tiering Model, or applies similar hardening measures to one's servers, this will impact Certification Authority Web Enrollment (CAWE).

Continue reading "Windows security permissions required for Certification Authority Web Enrollment (CAWE)"

Assume the following scenario:

• A user requests a certificate.
• An enrollment policy is configured for this, which points to a Certificate Enrollment Policy Web Service (CEP).
• The connection to the CEP fails and the user receives the following error message:

Error: The remote endpoint is unable to process the request due to being overloaded. 0x803d0012 (-2143485934 WS_E_ENDPOINT_TOO_BUSY)

Continue reading "Requesting a certificate via the Certificate Enrollment Web Services fails with error message "Error: The remote endpoint is unable to process the request due to being overloaded. 0x803d0012 (-2143485934 WS_E_ENDPOINT_TOO_BUSY)""

Assuming one implements Microsoft's Active Directory Administrative Tiering Model, or applies similar hardening measures to one's servers, this will have an impact on NDES components.

Continue reading "Required Windows security permissions for the Network Device Enrollment Service (NDES)"